Also don't mention exhaustive_tests without explanation. They're
included in our test suite (make check) anyway.
This is a partial backport of secp256k1#988
https://github.com/bitcoin-core/secp256k1/pull/988/commits/4c94c55bce9e1fae8fd2e8993726c8ec74cc0f7d
Depends on D19388